mail.elpolloloco.com
- El Pollo Loco -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 38:67:3e:d2:f4:b2:de:9f:d1:1e:72:25:e6:01:4d:cb was issued on by GeoTrust Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
El Pollo Loco
Organization:
El Pollo Loco
Organization unit: IT
Organization unit: IT
State / Province:
California
Locality: Costa Mesa
Country: US
Locality: Costa Mesa
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 38:67:3e:d2:f4:b2:de:9f:d1:1e:72:25:e6:01:4d:cbSerial Number (int): 74972848563424513033188728324745153995
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 2e:ae:53:fd:c4:70:3b:fb:a2:9c:9d:be:f3:c1:b1:c9:ba:1c:7a:41
Fingerprint (sha256): ec:f7:7c:72:88:be:3c:ad:2e:9c:82:4c:fc:c1:62:9a:56:50:69:cb:e6:37:4f:f2:f4:22:f6:bf:c7:87:d9:93
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate mail.elpolloloco.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.elpolloloco.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.elpolloloco.com
epl-exch-mb2.elpolloloco.com
mail.elpolloloco.com
epl-exch-mb2.elpolloloco.com
mail.elpolloloco.com
Other certificates including the domain name elpolloloco.com
(limited to 100 certificates)
*.elpolloloco.com
links.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
leapfrog-ssl-34.gcs-web.com
work.elpolloloco.com
imperva.com
imperva.com
flybuy.radiusnetworks.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
movableink.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
order.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
*.elpolloloco.com
mymail.elpolloloco.com
mail.elpolloloco.com
imperva.com
pickup.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
nomnom-prod-api-shield.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
imperva.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
order.elpolloloco.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
messaging.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
epl-exch-mb1.epl.lan
leapfrog-ssl-34.gcs-web.com
punchh.flyb.uy
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
mail.elpolloloco.com
order.elpolloloco.com
mymail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
*.elpolloloco.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
fhf.shopthefastlane.com
work.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
flybuy.radiusnetworks.com
links.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
leapfrog-ssl-34.gcs-web.com
work.elpolloloco.com
imperva.com
imperva.com
flybuy.radiusnetworks.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
movableink.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
order.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
*.elpolloloco.com
mymail.elpolloloco.com
mail.elpolloloco.com
imperva.com
pickup.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
nomnom-prod-api-shield.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
imperva.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
order.elpolloloco.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
messaging.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
epl-exch-mb1.epl.lan
leapfrog-ssl-34.gcs-web.com
punchh.flyb.uy
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
mail.elpolloloco.com
order.elpolloloco.com
mymail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
*.elpolloloco.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
fhf.shopthefastlane.com
work.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
flybuy.radiusnetworks.com
Certificate
The complete raw certificate details for mail.elpolloloco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIQOGc+0vSy3p/RHnIl5gFNyzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwNjA5MDAwMDAwWhcNMTcwNjA4MjM1 OTU5WjB7MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTETMBEGA1UE BxQKQ29zdGEgTWVzYTEWMBQGA1UEChQNRWwgUG9sbG8gTG9jbzELMAkGA1UECxQC SVQxHTAbBgNVBAMUFG1haWwuZWxwb2xsb2xvY28uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAr7Xrk8btDlV878bBsLwmgzBHvvukf+AbX/Gi+FKn xiQGcL9bxTDEtJ895lkG8j+QwTwttT+9mvlUUqQKYecHhkGjGbzfQANO5Y5UssTC yUhzzAlZOuvEgFURg/oL4tEela4XECyYP3dCBOXN1Tokoy1AmToF1dfw3Jgbk33I m+zGrAeids/aDL4cc9dXmsWIoc42cEbXdiUvV338BsQNMN+Jm8jNmcUoM7c48LEf sNT4eg0MEvWJmPI8MYIVrmism/aURSBSaZHECz3MB+3FR0wQoISYoqnAYhxb5v7l zMrFBQb1AGWXxA+YtpvhsR9HfWikQOFWfwyMa8GWrPM3qQIDAQABo4IB4jCCAd4w WwYDVR0RBFQwUoIcYXV0b2Rpc2NvdmVyLmVscG9sbG9sb2NvLmNvbYIcZXBsLWV4 Y2gtbWIyLmVscG9sbG9sb2NvLmNvbYIUbWFpbC5lbHBvbGxvbG9jby5jb20wCQYD VR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDov L2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGE MD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXib o3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1j ZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQDDC5OSigd1hO3ZDy0G4Y/7RyjKmDTIkLvkQpuQKBt+ SgbeJizNzlVyWWRF+v/REOL8JE91DKXrFBp+dStflYjTW8Elhc3KuIbaov74zYIy DrQg8TxVPmCKYSk1MtM0Cue17b/mCj5z/N1tW0J5IgTeMSc9bY7gT6qMJ1NjF29M 5wtiTIfXHK7YcQEj0/0EAiErcwo8RM9XZ1d4wlnVPspQWd1N0a05kdVVTGhT0Rxv pK+KOWUjY1BgbXUYX3I7vqoNVk0cQ8QXksRyLrGs8RukRcFW2UoAUZCuw66qpnim IIdTpctZpM8JSKasJEFm/gRSbf5N8aEof3kR9hyNkSy5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Xrk8btDlV878bBsLwm gzBHvvukf+AbX/Gi+FKnxiQGcL9bxTDEtJ895lkG8j+QwTwttT+9mvlUUqQKYecH hkGjGbzfQANO5Y5UssTCyUhzzAlZOuvEgFURg/oL4tEela4XECyYP3dCBOXN1Tok oy1AmToF1dfw3Jgbk33Im+zGrAeids/aDL4cc9dXmsWIoc42cEbXdiUvV338BsQN MN+Jm8jNmcUoM7c48LEfsNT4eg0MEvWJmPI8MYIVrmism/aURSBSaZHECz3MB+3F R0wQoISYoqnAYhxb5v7lzMrFBQb1AGWXxA+YtpvhsR9HfWikQOFWfwyMa8GWrPM3 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 74972848563424513033188728324745153995 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Costa Mesa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'El Pollo Loco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.elpolloloco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22181411574812150124458680274320314876392306153419025891611845600879684638798447416943897601224114204312875339168493110535265166629947013413035970958741616625065847667332727297358357822682349890998075988569784230466257791832143293994598093995184609327500682531483353188330839799909757483402373546027023780451723924685536982048337863955532542419737867218005737660918354769309789335946396061789757138738243185887113703105335938850024855110525333117407225096864249576975621835735055717919115117078041269888469568748512116256674606788533108979749597441729252245153060798539625542087207619597803664179211439825397876996009 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.elpolloloco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epl-exch-mb2.elpolloloco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.elpolloloco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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